General
- Target 670081ff1c3f7c9232949c576623f9a7.exe
- Size 235KB
- Sample220817-v3pkwsaffj
- SHA256 f6b30a3195b740a4dd8464d29bfb7bdbd860bbfd48a5a3e4b7c9a655d5d5fd3c
- MD5 670081ff1c3f7c9232949c576623f9a7
- SHA1 d47d4f6f06455cd55e9a0aaa04d0684cc5da7b31
- SHA512 ec08c48f58395a7ccf2ffdf4eca6c399082ddbe260f9fb24cc5a70885caffe0f8385187ef828989436f3d166fe0648567c5f21d2c3c42923871e21f1f64d0ad1
- SSDEEP 6144:pP0lWF+vEXRUR6AaEWjAOeBVOpdSCpNZQCX:pP0EF+cQ+ZpdSCp3QCX
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
670081ff1c3f7c9232949c576623f9a7.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
670081ff1c3f7c9232949c576623f9a7.exe
Resource
win10v2004-20220812-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 670081ff1c3f7c9232949c576623f9a7.exe
- Size 235KB
- SHA256 f6b30a3195b740a4dd8464d29bfb7bdbd860bbfd48a5a3e4b7c9a655d5d5fd3c
- MD5 670081ff1c3f7c9232949c576623f9a7
- SHA1 d47d4f6f06455cd55e9a0aaa04d0684cc5da7b31
- SHA512 ec08c48f58395a7ccf2ffdf4eca6c399082ddbe260f9fb24cc5a70885caffe0f8385187ef828989436f3d166fe0648567c5f21d2c3c42923871e21f1f64d0ad1
- SSDEEP 6144:pP0lWF+vEXRUR6AaEWjAOeBVOpdSCpNZQCX:pP0EF+cQ+ZpdSCp3QCX
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext